I found an approach like this was especially nice on teamcity in conjunction with its template feature. Individual apps were still able to have whatever specif

I found an approach like this was especially nice on teamcity in conjunction with its template feature. Individual apps were still able to have whatever specific thing they needed, but you could globally add a step, eg a security scanning tool or slack notification by modifying the template only rather than 100s of build configuration files as the GitHub / circleci approach seems to encourage. Adding a new pipeline basically just meant naming it and selecting the VCS URL